Show verified linked-symbol references with FBuild 2.5.38

POLICY.md

@@ -153,6 +153,18 @@
   separately; do not guess KEEP/vector/indirect roots from names.
 - Preserve all same-name report rows (code, aliases, map-derived fragments) in
   reference resolution; display provenance and addresses for ambiguous matches.
+- Consume the producer's strict, versioned reference analysis using the full
+  name/address/source identity. Show instruction references, static pointer
+  owners with offsets, and fragment owners separately from object references.
+  Do not describe static pointers as runtime callers.
+- Trust reference edges and roots only when the audit matches the measurement's
+  ELF digest, report URL and analyzer version, and explicitly confirms successful
+  ELF digest verification. Matching metadata alone cannot establish provenance.
+  Show unverified analysis explicitly.
+  Index each report once so symbol summaries and popups avoid repeated graph scans.
+- Include allocated weak data objects such as vtables. Missing incoming evidence
+  remains unexplained when indirect calls or linker retention are outside the
+  analyzer's supported passes; display the producer's limitations and pass status.
 - Reference-only refreshes use saved ELFs with matching digests and the same
   fbuild version, verifying symbol identities/sizes and memory totals unchanged.
   They do not rebuild firmware or alter measurement timestamps.

README.md

@@ -11,7 +11,8 @@ the top 10 symbols, then append 50 more per click while keeping earlier rows. [S
 is also generated from the actual dashboard for social link previews.
 
 Hover, focus, or click a symbol to inspect who references it (one level).
-Symbol-level and object-file references are listed separately. Unavailable
+Instruction references, static pointer owners (including vtable offsets),
+fragment owners and object-file references are listed separately. Unavailable
 analysis and unexplained retention are explicit; empty lists do not imply
 unused code. See the [reference audit](REFERENCE-AUDIT.md) and
 [coordinated follow-ups](https://github.com/FastLED/dashboard/issues/18).
@@ -37,7 +38,7 @@ Released library source is extracted unmodified with `git archive`; the same
 Arduino entry-point stub uses `::delay(0)` across revisions. This is a matched
 Blink workload, not each release's potentially different example sketch.
 
-Daily runs install the latest stable fbuild (currently 2.5.37) and recompute all
+Daily runs install the latest stable fbuild (currently 2.5.38) and recompute all
 seven release profiles plus master; historical values can change with tooling. Committed per-board configurations are shared across
 all releases. ESP32 boards use Arduino-ESP32 3.3.11/IDF 5.5.5. Uno uses Arduino
 AVR core 5.4.0/AVR GCC 7.3.0. Teensy uses framework 1.160.0/ARM GCC 11.3.1 with